Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZAqiwHn96HpUUV0B3iG8LoXeExo.cer
File: ZAqiwHn96HpUUV0B3iG8LoXeExo.cer (raw, json)
Hash identifier: fXF6y03aunE3HWfoQh4BR6BIck7Dh5i7xSD3TO8euZU=
Subject key identifier: 64:0A:A2:C0:79:FD:E8:7A:54:51:5D:01:DE:21:BC:2E:85:DE:13:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B793809F48CFCA9C03DA9D6D2A4009
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/57784b-107a-42d9-a21d-3a98966f5e31/1/ZAqiwHn96HpUUV0B3iG8LoXeExo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/57784b-107a-42d9-a21d-3a98966f5e31/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 20742
IP: 185.143.48.0/22
IP: 2a02:a50::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:93:80:9f:48:cf:ca:9c:03:da:9d:6d:2a:40:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=640aa2c079fde87a54515d01de21bc2e85de131a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:39:45:2a:31:9b:ab:4c:a5:16:10:8c:b4:64:
f3:ea:34:cf:77:23:71:08:1b:58:ae:6c:a6:c3:67:
2e:70:d1:2a:00:ac:a6:12:07:d7:46:6a:e7:01:36:
3b:08:c8:30:ef:60:22:14:46:a9:90:f0:e1:b6:da:
02:21:5d:80:69:24:14:6d:ba:c5:dc:cc:cd:54:c5:
67:aa:9c:99:fb:41:fe:f8:49:2b:23:b8:df:53:00:
03:81:d8:07:fb:0b:1a:5c:c4:17:6e:48:f5:0d:d6:
09:f5:0c:cb:60:44:d1:e9:c1:cf:12:4b:c4:01:b6:
a6:bf:79:42:2f:3b:95:0a:c4:a9:4e:22:c8:6f:9f:
cf:a3:b8:9b:17:8b:17:42:b1:b0:62:b0:d3:82:bf:
06:77:3b:d7:66:23:2c:5f:3a:6f:e5:66:e3:02:bb:
bc:cb:8c:59:e5:1c:df:27:86:90:a9:98:ec:25:03:
11:39:65:80:f8:70:f1:2d:ae:8f:82:59:93:70:b2:
e6:db:ce:26:ff:73:84:11:18:06:91:45:5e:5b:3a:
5b:b8:59:f3:f9:d1:85:d0:53:17:2c:ac:1c:28:56:
91:4a:20:35:26:49:b7:dd:5c:e5:dd:13:a3:50:cc:
d9:01:71:a0:50:26:7a:0e:17:ab:1e:a6:dd:04:51:
e4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0A:A2:C0:79:FD:E8:7A:54:51:5D:01:DE:21:BC:2E:85:DE:13:1A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/57784b-107a-42d9-a21d-3a98966f5e31/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/57784b-107a-42d9-a21d-3a98966f5e31/1/ZAqiwHn96HpUUV0B3iG8LoXeExo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.48.0/22
IPv6:
2a02:a50::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20742
Signature Algorithm: sha256WithRSAEncryption
47:ea:e0:9b:3f:1b:79:a9:7c:87:9e:24:a5:ed:ee:8e:17:79:
bc:bc:1a:d1:41:1a:57:54:19:9e:2c:7e:04:1a:4a:36:c3:ec:
dc:cd:2b:99:4e:e0:52:83:b2:3e:c6:ad:9b:de:be:89:51:f9:
7f:25:8a:10:9b:9d:50:20:4c:b8:8b:3c:0b:75:76:4e:65:79:
b5:81:d9:21:ca:d4:48:59:86:8d:12:49:cd:b5:5e:b7:64:bc:
9a:67:00:3a:41:c9:d3:b4:ea:34:2a:7a:6d:d6:c4:2e:8c:bb:
02:00:8b:41:26:43:c6:62:47:d7:16:4d:e1:4e:63:c9:50:0e:
92:50:89:18:8b:2a:0b:06:c9:3c:3a:be:eb:d1:eb:e3:be:b8:
a3:46:0e:8d:e9:95:57:59:b2:c5:73:f9:f2:95:a5:f3:66:95:
68:2d:24:52:aa:53:de:14:06:bc:98:3c:7e:9f:84:84:41:f8:
07:69:c5:a3:6e:6b:ee:ed:f9:7a:5f:94:72:93:f2:b2:6e:d6:
1b:62:d0:e2:30:30:86:c6:d2:32:73:b2:28:5d:3b:f4:38:37:
7f:2e:3e:d4:f1:b2:38:b1:54:1d:e1:d6:8d:33:d0:54:8a:fc:
71:28:1e:f1:05:e2:f8:0e:a5:c5:c4:b8:34:fa:48:5c:24:a2:
df:57:b5:a0
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgISAYzGt5OAn0jPypwD2p1tKkAJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjAyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDBhYTJjMDc5ZmRlODdhNTQ1MTVkMDFkZTIxYmMyZTg1ZGUxMzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzlFKjGbq0ylFhCMtGTz6jTPdyNx
CBtYrmymw2cucNEqAKymEgfXRmrnATY7CMgw72AiFEapkPDhttoCIV2AaSQUbbrF
3MzNVMVnqpyZ+0H++EkrI7jfUwADgdgH+wsaXMQXbkj1DdYJ9QzLYETR6cHPEkvE
Abamv3lCLzuVCsSpTiLIb5/Po7ibF4sXQrGwYrDTgr8GdzvXZiMsXzpv5WbjAru8
y4xZ5RzfJ4aQqZjsJQMROWWA+HDxLa6PglmTcLLm284m/3OEERgGkUVeWzpbuFnz
+dGF0FMXLKwcKFaRSiA1Jkm33Vzl3ROjUMzZAXGgUCZ6DherHqbdBFHk3wIDAQAB
o4ICrjCCAqowHQYDVR0OBBYEFGQKosB5/eh6VFFdAd4hvC6F3hMaMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhlLzU3Nzg0
Yi0xMDdhLTQyZDktYTIxZC0zYTk4OTY2ZjVlMzEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUvNTc3ODRi
LTEwN2EtNDJkOS1hMjFkLTNhOTg5NjZmNWUzMS8xL1pBcWl3SG45NkhwVVVWMEIz
aUc4TG9YZUV4by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuY8wMA0EAgACMAcDBQAqAgpQMBkGCCsGAQUF
BwEIAQH/BAowCKAGMAQCAlEGMA0GCSqGSIb3DQEBCwUAA4IBAQBH6uCbPxt5qXyH
niSl7e6OF3m8vBrRQRpXVBmeLH4EGko2w+zczSuZTuBSg7I+xq2b3r6JUfl/JYoQ
m51QIEy4izwLdXZOZXm1gdkhytRIWYaNEknNtV63ZLyaZwA6QcnTtOo0Knpt1sQu
jLsCAItBJkPGYkfXFk3hTmPJUA6SUIkYiyoLBsk8Or7r0evjvrijRg6N6ZVXWbLF
c/nylaXzZpVoLSRSqlPeFAa8mDx+n4SEQfgHacWjbmvu7fl6X5Ryk/KybtYbYtDi
MDCGxtIyc7IoXTv0ODd/Lj7U8bI4sVQd4daNM9BUivxxKB7xBeL4DqXFxLg0+khc
JKLfV7Wg
-----END CERTIFICATE-----
Generated at Fri May 3 07:41:36 2024 by rpki-client on console-fra.rpki-client.org